WordPress 3.8.4
Approved changes feed: RSS · Atom
cpe:2.3:a:wordpress:wordpress:3.8.4:*:*:*:*:*:*:*
part: a version: 3.8.4 update: *
| Vendor | Wordpress (21977de4-0364-5ea6-90ad-48069434cf00) |
|---|---|
| Product | Wordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wordpress/wordpress |
purl2cpe | 2026-06-01 10:12:03.527268 |
pkg:github/wordpress/wordpress-develop |
purl2cpe | 2026-06-01 10:12:03.527270 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14719 |
vulnerable | 2026-06-08 05:08:57.249906 |
Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9039 |
vulnerable | 2026-06-08 05:06:10.684273 |
Details available
wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message.
Published: 2014-11-25T23:00:00.000Z
Updated: 2024-08-06T13:33:13.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9038 |
vulnerable | 2026-06-08 05:06:10.683431 |
Details available
wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource.
Published: 2014-11-25T23:00:00.000Z
Updated: 2024-08-06T13:33:13.352Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9037 |
vulnerable | 2026-06-08 05:06:10.682664 |
Details available
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Published: 2014-11-25T23:00:00.000Z
Updated: 2024-08-06T13:33:13.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9036 |
vulnerable | 2026-06-08 05:06:10.677027 |
Details available
Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence in a post.
Published: 2014-11-25T23:00:00.000Z
Updated: 2024-08-06T13:33:13.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9035 |
vulnerable | 2026-06-08 05:06:10.676307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9034 |
vulnerable | 2026-06-08 05:06:10.675589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9033 |
vulnerable | 2026-06-08 05:06:10.674628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9031 |
vulnerable | 2026-06-08 05:06:10.669877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.